Your submission was sent successfully! Close

You have successfully unsubscribed! Close

CVE-2013-1775

Published: 27 February 2013

sudo 1.6.0 through 1.7.10p6 and sudo 1.8.0 through 1.8.6p6 allows local users or physically proximate attackers to bypass intended time restrictions and retain privileges without re-authenticating by setting the system clock and sudo user timestamp to the epoch.

Priority

High

Status

Package Release Status
sudo
Launchpad, Ubuntu, Debian
upstream
Released (1.7.10p7, 1.8.6p7)
hardy
Released (1.6.9p10-1ubuntu3.10)
lucid
Released (1.7.2p1-1ubuntu5.6)
oneiric
Released (1.7.4p6-1ubuntu2.2)
precise
Released (1.8.3p1-1ubuntu3.4)
quantal
Released (1.8.5p2-1ubuntu1.1)
Patches:
upstream: http://www.sudo.ws/repos/sudo/rev/ddf399e3e306 (1.7)
upstream: http://www.sudo.ws/repos/sudo/rev/ebd6cc75020f (1.8)